CVE-2022-3336 in Event Monster Plugin
Summary
The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via a CSRF attack
Reservation
09/27/2022
Disclosure
11/21/2022
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 214064 | Event Monster Plugin cross-site request forgery | 352 | Not defined | Official fix | CVE-2022-3336 |